AES Encryption

AES-256-GCM, key derived from your passphrase via PBKDF2 (100,000 iterations) with a random salt per encryption — runs entirely in your browser.